Connector Xpress Guide › Installing Connector Xpress › Share Trusted Certificate Store of Java Connector Server

Share Trusted Certificate Store of Java Connector Server

In Connector Xpress, you can define a JNDI Data source as TLS/SSL enabled.

If a JNDI Data Source is TLS/SSL enabled, import the JNDI Data Source certificate into the Java Connector Server trusted certificate store. Modify the Connector Xpress startup script to reference the Java Connector Server trusted certificate store.

Follow these steps:

1. Navigate to the following location of the Java Connector Server trusted certificate store:

   jcs_home\conf\server_jcs.xml

2. In the connectorClientCertStore property setting, find the path of the certificate store

   <property name="connectorClientCertStore"><value>../conf/ssl.keystore</value></property> 
   

3. Enter the following command:

   keytool –import –trustcacerts –keystore "c:\Program Files\CA\IM\Connector Server\conf\ssl.keystore" -storepass <Keystore Password> –file <trusted certificate>.pem

   The JNDI Data Source certificate is imported into the ssl.keystore.

4. In the Connector Xpress startup script or shortcut, add javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword parameters to the java command lines. For example:

   java -Xms128M -Xmx512m "-Djavax.net.ssl.trustStore=C:\Program Files\CA\IM\Connector Server\conf\ssl.keystore" -Djavax.net.ssl.trustStorePassword=<Keystore  Password> -Dswing.aatext=true -Dcom.ca.commons.logging.nolog4j=true -Djava.util.logging.config.file=..\conf\logging.properties -jar ..\lib\conxp.jar %*   java -Xms128M -Xmx512m "-Djavax.net.ssl.trustStore=C:\CA\IM\Connector Server\conf\ssl.keystore" -Djavax.net.ssl.trustStorePassword=<MyPassword> -Dswing.aatext=true -Dcom.ca.commons.logging.nolog4j=true -Djava.util.logging.config.file=..\conf\logging.properties -jar ..\lib\conxp.jar %* 
   

5. Restart Java Connector Service and Connector Xpress.
6. Test the TLS/SSL connection in Connector Xpress.

Install Connector Xpress Silently

Connector Xpress supports a silent mode of installation. To run a silent install, it is necessary to create a response file.

Follow these steps:

1. In a command window, navigate to where you extracted the Connector Xpress files, then to the following subfolder:

   Provisioning/ConnectorXpress
   

2. Do either of the following depending on whether you want to install the component as you create the response file, or whether you want to create a response file template to use with a silent install at a later time:
   • To create a response file and install the component at the same time, enter the following command and then run through the installation:

     setup -options-record install_response_file
     

   • To create a response file, but not install the component, enter the following command and then enter the required values in the template:

     setup -options-template install_response_file 
     

   Note: Use fully qualified path names when generating and running response files. For example, responsefile.txt is not valid but C:\responsefile.txt is valid.

3. Start the silent installation using the following command:

   setup -options install_response_file -silent
   

Uninstall Connector Xpress Silently

Connector Xpress supports a silent mode of uninstallation. To run a silent uninstall you must create a response file.

Follow these steps:

1. In a command window, navigate to the uninstall directory which is one of the following:
   • Windows

     C:\Program Files\CA\Identity Manager\Connector Xpress\_uninst
     

   • UNIX

     /opt/CA/IdentityManager/ConnectorXpress/_uninst
     

2. Do one of the following depending on whether you want to uninstall the component as you create the response file, or whether you want to create a response file template to use with a silent uninstall at a later time.
   • To create a response file and uninstall the component at the same time, enter the following command and then run through the uninstallation:

     uninstaller -options-record uninstall_response_file 
     

   • To create a response file, but not install the component, enter the following command and then enter the required values in the template:

     uninstaller -options-template uninstall_response_file 
     

   Note: Use fully qualified path names when generating and running response files. For example, responsefile.txt is not valid but C:\responsefile.txt is valid.

3. Start the silent installation using the following command:

   uninstaller -options uninstall_response_file -silent