CA Identity Manager Connector Guides › Connectors Guide › Connecting to Endpoints › RSA Authentication Manager SecurID 7 Connector

RSA Authentication Manager SecurID 7 Connector

The RSA SecurID 7 Connector provides a single point for all user administration and lets you administer the following objects on RSA SecurID endpoints:

• Accounts (Local and trusted)
• Administrative roles
• RADIUS profiles
• Tokens
• Security domains
• Trusted groups
• User groups

In addition, you can view read-only information about the following objects on RSA SecurID endpoints:

• Authentication agents
• Authentication grade policies
• Identity sources
• Lockout policies
• Off-line authentication policies
• Password policies
• Self-service troubleshooting policies
• Token policies
• Trusted realms

Note: The RSA SecurID 7 connector only supports RSA SecurID 7.1 endpoints.

Set Up the RSA SecurID 7 Connector

For the RSA SecurID 7 Connector to work, it requires files that are installed with the RSA Authentication Manager server.

Before you use the connector, create a bundle that contains these files, and then add the bundle to the connector.

Follow these steps:

1. Install or upgrade CA IAM Connector Server.

   The installation registers CA IAM Connector Server with the provisioning server, creates the Salesforce.com endpoint, and populates it with its associated metadata.

2. Ask the SecurID administrator to send you a copy of the following files from the RSA Authentication Manager server, in RSA_AM_HOME/appserver/:
   • license.bea
   • .../modules/com.bea.core.process_5.3.0.0.jar
   • .../weblogic/server/lib/EccpressoAsn1.jar
   • .../weblogic/server/lib/EccpressoCore.jar
   • .../weblogic/server/lib/EccpressoJcae.jar
   • ...weblogic/server/lib/wlcipher.jar
   • .../weblogic/server/lib/wlfullclient.jar

   Note: You will need to generate the wlfullclient.jar file. For more information, see the RSA Authentication Manager 7.1 Developer's Guide.

3. Ask the SecurID administrator to log in to https://knowledge.rsasecurity.com, and download and extract the contents of the RSA Authentication Manager 7.1 SDK file named am-7.1-sp3-sdk.zip. The connector needs the following files:
   • am-client.jar
   • ims-client.jar
   • commons-beanutils-1.7.0.jar
   • iScreen-1-1-0rsa-2.jar
   • iScreen-ognl-1-1-0rsa-2.jar
   • ognl-2.6.7.jar
   • systemfields-o.jar
   • hibernate-annotations-3.2.1.jar
4. Export the Server Root Certificate from the RSA Authentication Manager server and copy it to the CA IAM Connector Server computer.

   Note: For more information about exporting the Root Certificate, see the RSA Authentication Manager 7.1 Developer's Guide. The post-installation utility that you run later in this process automatically imports the Server Root Certificate.

5. Save the files on the CA IAM Connector Server computer.
6. Run the rsa7_post_install script in the following location:

   cs-home/bin

   The script asks for the location of the SecurID files. It then creates a bundle and saves it in the same file as the script.

7. Log in to CA IAM Connector Server.
8. At the top, click the Connector Servers tab.
9. In the Connector Server Management area, click the Bundles tab.
10. Add the new bundle:

    Note: You can deploy the OSGI bundle from the connector server GUI or copy the jar files to ca-home/jcs/data/bundles/restore. Then restart the connector server and wait up to ten minutes for it to load.

    1. In the Bundles area on the right, click Add.
    2. Browse to the bundle that the script created, then select the connector server on which this connector will be available.
    3. Click OK.

       The new bundle appears in the Bundles list.

11. Find the main connector bundle in the Bundles list, then right-click its name in the list and select Refresh Imports from the popup menu.

The RSA SecurID 7 connector can now use the extra files.

Acquire an RSA SecurID 7 Endpoint

To acquire and manage the RSA SecurID endpoint, you must get the command client user name and password from the RSA Authentication Manager.

Note: For more information about getting the command client user name and password, see the RSA Authentication Manager 7.1 Developer's Guide, available in the RSA Authentication Manager 7.1 SDK.

The command client credentials let you acquire and manage an RSA SecurID endpoint.

Upgrade the RSA SecurID 7 Connector

The RSA SecurID 7 connector supports RSA Authentication Manager 7.1 SP3 or higher.

If you have a previous version of the RSA SecurID 7 connector, upgrade your RSA Authentication Manager 7.1 installation to SP3 and run the RSA SecurID 7 Connector post-installation utility.

The utility replaces the current SDK files installed on CA IAM Connector Server computer with RSA 7.1 Authentication Manager SP3 SDK files. To download the required RSA SP3 SDK files, RSA login credentials are required.

Follow these steps:

1. Upgrade your RSA Authentication Manager 7.1 endpoint to RSA Authentication Manager 7.1 SP3.

   Note: For more information about upgrading your RSA Authentication Manager 7.1 endpoint, see https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8624.

2. Go to the RSA SecurCare Online website:

   https://knowledge.rsasecurity.com

   Download and extract the following file:

   am-7.1-sp3-sdk.zip

3. Navigate to cs_home\Resources\rsa7 and enter the following command:

   RSA7_post_install.bat -rsasdk
   

   Note: The utility is installed as part of the CA IAM Connector Server installation.

4. When prompted, enter the location of the RSA SP3 SDK files you copied in step 2.
5. Restart the CA IAM Connector Server computer.

   You have upgraded your RSA SecurID 7 connector SDK files and they are now compatible with RSA Authentication Manager 7.1 SP3.

Upgrade RSA SecurID 7 Connector After CA Identity Manager Upgrade

If you are upgrading CA Identity Manager from a previous version, run the RSA SecurID 7 Connector post-installation utility. The utility replaces the current SDK files installed on CA IAM Connector Server computer with RSA 7.1 Authentication Manager SP3 SDK files. To download the required RSA SP3 SDK files, RSA login credentials are required.

Follow these steps:

1. Upgrade your RSA Authentication Manager 7.1 endpoint to RSA Authentication Manager 7.1 SP3.

   Note: For more information about upgrading your RSA Authentication Manager 7.1 endpoint, see https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8624.

2. Go to the RSA SecurCare Online website:

   https://knowledge.rsasecurity.com

   Download and extract am-7.1-sp3-sdk.zip.

3. Navigate to cs_home\Resources\rsa7 and enter the following command:

   RSA7_post_install.bat
   

   Note: The utility is installed as part of the CA IAM Connector Server installation.

4. When prompted, enter the location of the RSA SP3 SDK files you copied in step 2.
5. When prompted, enter the location of the Weblogic files, and the RSA server certificate.
6. Restart the CA IAM Connector Server computer.

   You have upgraded your RSA SecurID 7 connector SDK files and they are now compatible with RSA Authentication Manager 7.1 SP3.