Installation and Upgrade Guides › Policy Server Installation Guide › Configuring LDAP Directory Servers as a Policy or Key Store › Active Directory as a Policy Store › How to Configure the Policy Store › Import the Default Policy Store Objects

Import the Default Policy Store Objects

Importing the default policy store objects sets up the policy store for use with the Administrative UI. The default policy store objects are required to store policy information in the policy store.

Note: If you have installed the Policy Server in FIPS-only mode, ensure you use the -cf argument when importing the default policy store objects.

To import the default policy store objects

1. Run the following command:

   smobjimport -ipolicy_server_home\db\smdif\smpolicy.smdif
   -dsiteminder_super_user_name -wsiteminder_super_user_password -v
   

   If the argument contains spaces, use double quotes around the entire argument.

   Windows example: smobjimport

   -i"C:\Program Files\CA\siteminder\db\smdif\smpolicy.smdif" -d"SM Admin" -wPassword -v
   

   UNIX example: smobjimport

   -i$NETE_PS_ROOT/db/smdif/smpolicy.smdif -d"SM Admin" -wPassword -v
   

   • policy_server_home

     Specifies the Policy Server installation path.

   • -dsiteminder_super_user_name

     Specifies the name of the SiteMinder super user account.

   • -wsiteminder_super_user_password

     Specifies the password for the SiteMinder super user account.

   • -v

     Turns on tracing and outputs error, warning, and comment messages in verbose format so that you can monitor the status of the import.

     Default value: stdout

   • -cf

     (Optional) Imports sensitive data using FIPS-compatible cryptography.

     Note: This argument is only required if the Policy Server is operating in FIPS-only mode.

   smobjimport imports the policy store objects. The objects are automatically imported to the appropriate locations.

2. Run the following command:

   smobjimport -ipolicy_server_home\db\smdif\ampolicy.smdif
   -dsiteminder_super_user_name -wsiteminder_super_user_password -f -v -l -c
   

   • policy_server_home

     Specifies the Policy Server installation path.

   • -dsiteminder_super_user_name

     Specifies the name of the SiteMinder super user account.

   • -wsiteminder_super_user_password

     Specifies the password for the SiteMinder super user account.

   • -f

     Overrides duplicate objects.

   • -v

     Turns on tracing and outputs error, warning, and comment messages in verbose format so that you can monitor the status of the import.

     Default value: stdout

   • -l

     Creates a log file.

   • -c

     Indicates that the smdif input file contains unencrypted data.

   smobjimport imports the policy store objects. These objects are automatically imported to the appropriate locations.

   Note: Importing ampolicy.smdif makes available Federation Security Services, Web Service Variables, and eTelligent Rules functionality that is separately licensed from SiteMinder. If you intend on using the latter functionality, contact your CA account representative for more information about licensing.

You can now import the policy store data definitions.