Previous Topic: Register Your System as a Trusted Host on UNIX

Next Topic: Modify the SmHost.conf File (UNIX)

Register a Trusted Host in GUI or Console Mode

These instructions are for GUI and Console Mode registration. The steps for the two modes are the same, with the following exceptions for Console mode:

To register a host

  1. If necessary, start the Configuration Wizard as follows:
    1. Open a console window.
    2. Navigate to web_agent_home/install_config_info
    3. Enter one of the following commands:

      GUI Mode: ./ca-wa-config.bin

      Console Mode: ./ca-wa-config.bin -i console

    The Configuration Wizard starts.

  2. In the Host Registration dialog box:
    1. Select Yes to register a host now or No to register the host at a later time.
    2. If you are using PKCS11 cryptographic hardware in your SiteMinder environment, select the check box.
    3. Click Next.
  3. If you enabled cryptographic hardware, complete the fields. If not, skip to the next step.
    1. In the PKCS11 DLL field, enter the full path to the PKCS11 DLL. Click on Choose to search for the DLL.
    2. Optionally, specify the token label in the Token Label and Token Passphrase, if applicable. Re-confirm the passphrase in the Confirm token passphrase field then click Next.
  4. Complete the following fields in the Admin Registration dialog box, then click Next:
  5. In the Trusted Host Name and Configuration Object dialog box, enter values for the two fields then click Next.
    1. In the Trusted Host Name field, enter a unique name that represents the trusted host to the Policy Server. This name does not have to be the same as the physical client system that you are registering; it can be any unique name, for example, mytrustedhost.

      Note: This name must be unique among trusted hosts and not match the name of any 4.x Web Agent. It can be the same name as a 5.0 Web Agent, but this is not recommended.

    2. In the Host Configuration Object field, enter the name of the Host Configuration Object specified in the Policy Server, then click Next.

      This object defines the connection between the trusted host and the Policy Server. To use the default, enter DefaultHostSettings. In most cases, you will use your own Host Configuration Object.

      Note: The entry you specify must match the Host Configuration Object entry set at the Policy Server.

  6. In the Policy Server IP Address dialog box:
    1. Enter the IP address, or host name, and the authentication port of the Policy Server where you are registering the host. The default port is 44442. If you do not provide a port, the default is used.

      You can specify a non-default port number, but if you are using a nondefault port and you omit it, SiteMinder displays the following error:

      Registration Failed (bad ipAddress[:port] or unable to connect to Authentication server (-1))

      Note also that if you specify a non-default port, that port is used for the Policy Server's authentication, authorization, and accounting ports; however, the unified server responds to any Agent request on any port. The entry in the SmHost.conf file will resemble:

      policyserver="ip_address,5555,5555,5555"

    2. Click Add.

      You can add more than one Policy Sever; however, for host registration, only the first server in the list will be used. If you add multiple entries, separate them by a comma.

      If multiple Policy Servers are specified, the Agent uses them as bootstrap servers. When the Agent starts up, the Web Agent has several Policy Servers to which it can connect to retrieve its Host Configuration Object. After the Host Configuration Object is retrieved, the bootstrap Policy Server is no longer used by that server process. The Host Configuration Object can contain another set of servers, which may or may not include any of the bootstrap servers.

    3. Click Next.
  7. If you want to use FIPS encryption, choose one of the following options:

    If you are not using FIPS encryption, use the default value.

  8. Click Next.
  9. Accept the default location of the host configuration file, SmHost.conf or click Choose to select a different location. Click Next.

    If you select a non-default location then want to revert to the default directory, click Restore Default Folder.

    The host is registered and a host configuration file, SmHost.conf, is created in web_agent_home/config. You can modify this file.

  10. Configure your Web Agent.


Copyright © 2006 CA. All rights reserved. Email CA about this topic