Configuration Guide › SiteMinder Integration › How to Protect CA Identity Manager with SiteMinder › Configure the Policy Store for CA Identity Manager › Configure CA Directory Server

Configure CA Directory Server

To configure a CA Directory policy store

1. Configure the directory as a supported SiteMinder Policy Store.

   Note: Be sure that SiteMinder is pointing to this policy store. For configuration instructions, see the CA SiteMinder Policy Server Installation Guide.

2. Copy etrust_ims8.dxc to dxserver_home\config\schema

   where dxserver_home is the directory where CA Directory is installed. The default source location for this file on Windows is C:\Program Files\CA\Identity Manager\IAM Suite\Identity Manager\tools\policystore-schemas\eTrustDirectory.

3. Create a custom schema configuration file as follows:
   1. Copy the dxserver_home\config\schema\default.dxg to dxserver_home\config\schema\company_name-schema.dxg.
   2. Edit the dxserver_home\config\schema\company_name-schema.dxg file by adding the following lines to the bottom of the file:

      # Identity Manager Schema
      source "etrust_ims8.dxc";
      

4. Edit the dxserver_home\bin\schema.txt file by adding the contents of etrust_ims_schema.txt to the end of the file. The default source location for this file on Windows is C:\Program Files\CA\Identity Manager\IAM Suite\Identity Manager\tools\policystore-schemas\eTrustDirectory.
5. Create a custom limits configuration file as follows:
   1. Copy the dxserver_home\config\limits\default.dxc to dxserver_home\config\limits\company_name-limits.dxc.
   2. Increase the default size limit to 5000 in the dxserver_home\config\limits\company_name-limits.dxc file as follows:

      set max-op-size=5000
      

   Note: If you upgrade CA Directory, the limits.dxc file is overwritten, therefore you must reset max-op-size to 5000 after the upgrade is completed.

6. Edit the dxserver_home\config\servers\dsa_name.dxi as follows:

   # schema
   source "company_name-schema.dxg";
   
   #service limits
   source "company_name-limits.dxc";
   

   where dsa_name is the name of the DSA using the customized configuration files.

7. Run the dxsyntax command.

   This utility reports any errors with the directory configuration. If this utility runs with no errors, continue to Step 8.

8. Stop and restart the DSA as the dsa user to make the schema changes take effect, as follows:

   dxserver stop dsa_name
   dxserver start dsa_name