Previous Topic: Example Scenario: Configure the Existing Installation to Regenerate CA Process Automation CertificatesNext Topic: Enable Secure Communications for an Existing CA Process Automation System


Post-installation Support for CA EEM Upgrades

If you are running the installation process against the same CA Process Automation version, you are presented with the following options:

Reinstall

Displays the entire installation wizard.

Select Reinstall if your previous installation used the CA EEM Release 8.4 server but you have upgraded the CA EEM server to Release 12.

Select Reinstall if you use CA EEM Release 12.5 but your SDK version is major version 8. The reinstall process updates the SDK to major version 12.

Note: CA Process Automation can use CA EEM SDK major version 8 with CA EEM Release 12.x. Upgrading the SDK to major version 12 lets you use the new CA EEM features.

Configure the existing installation

Displays only selected pages. (This process modifies the properties files; it does not modify any JARs.)

Select this option if you generated CA EEM certificates with longer key lengths (2048 or 4096) after you installed or upgraded CA Process Automation to Release 4.2.

When you click Register on the CA EEM configuration page, CA Process Automation prompts you to upgrade the existing application in CA EEM. When you agree to upgrade, CA Process Automation certificates (used to communicate with CA EEM) are regenerated. The new CA Process Automation certificates have key lengths matching the lengths of CA EEM certificates.

Note: See the CA EEM documentation for more information about upgrading CA EEM or its certificates.

CA Process Automation uses the CA EEM SDK to communicate with CA EEM; communication is secured with certificates. Both CA EEM and CA Process Automation have certificates. CA Process Automation certificates must have the same key length as CA EEM certificates.

During CA Process Automation Release 4.2 installation or upgrade to Release 4.2, the installation process retrieves the CA Process Automation certificates from CA EEM and chooses the appropriate SDK for the associated CA EEM. These certificates can be found here:

install_dir/server/c2o/.c2orepository/public/certification

As long as CA EEM is not changed, no action is required. However, the following changes to CA EEM require your action.

Install CA Process Automation Release 4.2 with CA EEM Release 8.4 and then upgrade CA EEM to Release 12.x

It is possible to take no action and still use CA Process Automation with CA EEM as long as the CA EEM certificates are generated with the default key lengths. CA Process Automation can use the CA EEM SDK major version 8 to communicate with CA EEM Release 12.x. However, the CA EEM SDK major version 12 allows you to take advantage of new features in CA EEM 12.x.

We recommend that you (1) upgrade the certificates that CA Process Automation uses to communicate with CA EEM and (2) upgrade CA Process Automation to use the CA EEM SDK major version 12. To do this, rerun the installer. The following procedure references step numbers from Install the Domain Orchestrator.

Install CA Process Automation Release 4.2 with CA EEM Release 12.51 and then generate new CA EEM certificates with 2048 or 4096 key lengths

  1. CA Process Automation Release 4.2 is installed with CA EEM Release 12.51 using certificates with 1024-bit key lengths.
  2. You generate new CA EEM certificates with 2048 (or 4096) key lengths.
  3. You re-run the CA Process Automation installation wizard, but this time you select Configure existing installation (not Reinstall).
  4. You register CA Process Automation with CA EEM. That is, register the configured "EEM Application Name" value with CA EEM. The registration process generates new CA Process Automation certificates.

Result: Certificates that CA Process Automation uses when invoking the CA EEM SDK Release 12.51 match the longer key lengths used by CA EEM.

See Example Scenario: Configure the Existing Installation to Regenerate CA Process Automation Certificates.

Configure CA EEM to Permit Referenced Users to Log in with an Email Name

  1. CA Process Automation Release 4.2 is installed with CA EEM using a referenced user store. The referenced user store is configured as Multiple Active Directories.
  2. During CA Process Automation installation, you define which AD to use as the Default Active Directory.

    Referenced users belonging to the default AD can log in to CA Process Automation with their unqualified user name and password.

  3. Without the next step, CA EEM permits referenced users in other domains to log in with their principal name (domain\username) and password.
  4. Configure CA EEM to permit referenced users to log in with their email name.

Result: Users who are not in the configured default AD domain can log in with their principal name and password, where both of the following formats for the principal name are supported:

username@domain
domain\username

Summary of Register Application with CA EEM