The DSM Explorer › Control Panel › How to Configure and Authenticate External Directories › Scalability Server Properties Dialog › Review Configuration Options and Add the Directory

Review Configuration Options and Add the Directory

The Finish wizard page summarizes the configuration settings and options you have selected for the directory. Click Finish to complete the process of adding the specified directory to the repository, or click Back to change any of the settings and options.

The external directory is now configured.

(Optional) Import a Certificate (LDAPS only)

When using LDAPS to secure access to a defined LDAP or OpenLDAP directory, the Windows server must be able to trust the certificate from the LDAPS server. If the certificate is not from a trusted certificate authority, then you must manually import the certificate to the certificate store to complete the configuration process for your new directory.

Note: For detailed information about the wizards and dialogs in the following procedure, see the Microsoft documentation for x.509 certificates.

Follow these steps:

1. Locate ..\CA\DSM\bin\itrm_dsm_r11_root.der and double-click this file.

   The Import Certificate dialog appears.

2. Click Install Certificate.

   The Certificate Import Wizard appears.

3. Click Next.

   The Certificate Store wizard page appears.

4. Select the Place All Certificates in the Following Store option.
5. Click Browse.

   The Select Certificate Store dialog appears.

6. Select the Show Physical Stores option.
7. Do one of the following:
   • If the certificate is self-signed, expand Trusted Root Certification Authorities and select Local Computer.
   • If the certificate is not self-signed, expand Third-Party Root Certification Authorities and select Local Computer.

   Important! This step is essential. The certificate must be added to the physical store: otherwise, the current user's store will be used and the certificate will not be available to the local system account used by CA ITCM.

8. Click OK.

   The dialog closes, and you are returned to the wizard.

9. Click Next and Finish.

   The import was successful message appears.

10. Click OK.

    The specified certificate was added to the certificate store.

    Note: You can also use the encUtilCmd certimport command to perform the same operation.

Verify the Configured Directory

After you add and configure the directory, you can verify whether the Configured directory is added to DSM Explorer.

Follow these steps:

1. Navigate to the Control Panel, Directory Integration, Configured Directories node.

   The name and descriptions of all the configured external directories in the current domain is displayed. The description column displays an LDAP URL for each of your Active Directory configured directories, if any.

The external directory is now configured.

(Optional) Update the Directory

You can also update the directory properties.

1. (Optional) Update a configured directory using Properties of a configured directory.

   Update Directory dialog with the following tabs appears.

   • Settings
   • Security
   • Schema