Policy Server Guides › Policy Server Configuration Guide › User Directories › How to Configure an LDAP User Directory Connection over SSL › Create the Certificate Database Files

Create the Certificate Database Files

The Policy Server requires that the certificate database files be in the Netscape version file format (cert7.db). You may use the NSS utility to create the certificate database files.

Note: The following procedure details the specific options and arguments to complete the task. For a complete list of the NSS utility options and arguments, refer to the Mozilla documentation on the NSS project page.

To create the certificate database files

1. From a command prompt, navigate to the bin directory in the location to which you extracted the NSS utility.

   Example: C:\nss\bin

   Note: Windows has a native certutil utility. Ensure you are working from the bin directory of the NSS utility or you may inadvertently run the Windows certutil utility.

2. Enter the following command:

   certutil -N -d certificate_database_directory
   

   • -N

     Creates the cert7.db, key3.db, and secmod.db certificate database files.

   • -d certificate_database_directory

     Specifies the directory to which the NSS utility is to create the certificate database files.

   Note: If the file path contains spaces, bracket the path in quotes.

   The utility prompts for a password to encrypt the database key.

3. Enter and confirm the password.

   NSS creates the required certificate database files:

   • cert7.db
   • key3.db
   • secmod.db

Example: Create the Certificate Database Files

certutil -N -d C:\certdatabase