Previous Topic: (Optional) Increase File HandlesNext Topic: Multi-valued Attribute Changes not Supported in Export

Release Notes › Known Issues › Using Secured Active Directory as a User Store for CA IdentityMinder Requires a Certificate in CA GovernanceMinder

Using Secured Active Directory as a User Store for CA IdentityMinder Requires a Certificate in CA GovernanceMinder

Symptom:

When integrating CA GovernanceMinder with CA IdentityMinder using Active Directory (with SSL enabled) as a user store, the import feature fails.

Solution:

To work around this issue, do the following:

  1. Configure CA GovernanceMinder for SSL.

    Note: For more information about configuring CA GovernanceMinder with SSL, see the Installation Guide.

  2. If your certificate is not published by CA (Certificate Authority), perform the following steps:
    1. Import a certificate into a keystore in the default JDK JRE security directory.
    2. Reference the keystore in either the batchImport.properties file or the eurekify.bat file by adding JRE arguments, such as the following: 
      -Djavax.net.ssl.keyStore="C:/Program Files/Java/jdk1.6.0_21/jre/lib/security/storename" -Djavax.net.ssl.keyStorePassword=changeit - Djavax.net.ssl.trustStore="C:/Program Files/Java/jdk1.6.0_21/jre/lib/security/storename"