Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › X.509 Client Certificate or HTML Forms Authentication Schemes › X.509 Client Certificate or HTML Forms Scheme Prerequisites

X.509 Client Certificate or HTML Forms Scheme Prerequisites

Ensure the following prerequisites are met before configuring a X.509 Client Certificate or HTML Forms authentication scheme:

• An X.509 Server Certificate is installed on the SSL Web server.

  Note: If the Policy Server is operating in FIPs mode, ensure the certificate was generated using only FIPS-approved algorithms.

• The network must supports SSL connection to the client browser (HTTPS protocol).
• X.509 client certificates are installed on client browsers.
• Trust must is established between client certificates and server certificates.
• Certificates are issued by a valid and trusted Certification Authority (CA).
• The issuing CA’s public key validates the issuer’s digital signature.
• Client and server certificates have not expired.
• The user’s public key validates the user’s digital signature.
• User attributes requested by the HTML form exist in a user directory.
• A directory connection exists between the Policy Server and the user directory.
• (Sun Java Systems) If you are using a Sun Java Systems web server, increase the value of the StackSize parameter in the magnus.conf file to a value greater than 131072. Failing to change the value causes the web server to dump its core and restart each time CA SiteMinder® makes an authentication request using forms.

More information:

User Directories