Configure a Global Catalog User Store With an SSL Connection

You can configure the Global Catalog and the Policy Server to communicate over an encrypted SSL connection.

To configure the Policy Server to use an SSL connection with the Global Catalog

Install the Certificate Authority's (CA) root certificate into the Netscape cert7.db database on each machine that expects to use SSL to communicate with the Global Catalog user directory.
Note: SOA Security Manager requires the certificate to be in a Netscape version file format (cert7.db), so do not use Microsoft Internet Explorer to install the certificate.
In the Netscape Certificate Database File field on the Data tab on the Policy Server Management Console, configure the Policy Server to use SSL by specifying the path to the cert7.db file.