Previous Topic: Policy StoreNext Topic: Stop an Unattended Policy Server Installation


SM Key Database

If you set the DEFAULT_SMKEYDB_CHOICE parameter to true, then set the following:

DEFAULT_CREATE_SMKEYDB

Specifies if the Policy Server installer is to create an smkeydatabase or change the password of an existing smkeydatabase.

true

The installer creates an smkeydatabase.

false

The installer changes the password of an existing smkeydatabase.

DEFAULT_SMKEYDB_PW

If you set the DEFAULT_CREATE_SMKEYDB parameter to true, this parameter lets you enter a clear text password for the new smkeydatabase.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_SMKEYDB_PW and uncomment DEFAULT_SMKEYDB_PW, then the installer uses the cleartext password from DEFAULT_SMKEYDB_PW.

ENCRYPTED_SMKEYDB_PW

Represents the encrypted smkeydatabase password entered the last time the Policy Server installer configured an smkeydatabase. If you set the DEFAULT_CREATE_SMKEYDB parameter to true, you can use the existing encrypted value to set the password for the new smkeydatabase. This password cannot be changed.

Default: This parameter is uncommented. The installer uses this value, unless you comment out this parameter and uncomment DEFAULT_SMKEYDB_PW.

Important! Do not modify this password because the value is encrypted.

DEFAULT_OLD_SMKEYDB_PW

If you set the DEFAULT_CREATE_SMKEYDB parameter to false, this parameter lets you enter the existing smkeydatabase password in clear text.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_OLD_SMKEYDB_PW and uncomment DEFAULT_OLD_SMKEYDB_PW, then the installer uses the cleartext password from DEFAULT_OLD_SMKEYDB_PW.

ENCRYPTED_OLD_SMKEYDB_PW

Represents the encrypted smkeydatabase password entered the last time the Policy Server installer configured an smkeydatabase. If you set the DEFAULT_CREATE_SMKEYDB parameter to false, you can use the existing encrypted value to change the smkeydatabase password. This password cannot be changed.

Default: This parameter is not commented. The installer uses this value, unless you comment out this parameter and uncomment DEFAULT_OLD_SMKEYDB_PW.

Important! Do not modify this password because the value is encrypted.

DEFAULT_NEW_SMKEYDB_PW

If you set the DEFAULT_CREATE_SMKEYDB parameter to false, this parameter lets you enter the new smkeydatabase password in clear text.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_NEW_SMKEYDB_PW and uncomment DEFAULT_NEW_SMKEYDB_PW, then the installer uses the cleartext password from DEFAULT_NEW_SMKEYDB_PW.

ENCRYPTED_NEW_SMKEYDB_PW

Represents the encrypted smkeydatabase password entered the last time the Policy Server installer changed an smkeydatabase password. If you set the DEFAULT_CREATE_SMKEYDB parameter to false, you can use the existing encrypted parameter to change an smkeydatabase password. Only use the encrypted value to change the password if you know the existing value. This password cannot be changed.

Default: This parameter is not commented. The installer uses this value, unless you comment out this parameter and uncomment DEFAULT_NEW_SMKEYDB_PW.

Important! Do not modify this password because the value is encrypted.

DEFAULT_SMKEYBD_IMPORT_CHOICE

If you set the DEFAULT_CREATE_SMKEYDB parameter to true, this parameter lets you specify if the installer is to import the certificate authority (CA) default certificates into the smkeydatabase.

true

The installer imports the CA default certificates.

false

The installer does not import the CA default certificates. These certificates must be manually imported into the smkeydatabase after the installer creates the smkeydatabase.

Run the Policy Server Installer

You run an unattended installation to install the Policy Server without user interaction.

Before You Install

You install the Policy Server using the installation media on the Technical Support site.

Note: For a list of installation media names, see the Policy Server Release Notes.

More information:

Locate the Installation Media

Installation Media Names

Windows

To run an unattended Policy Server install, run the following command from the directory to which you copied the Policy Server installation executable and the properties file:

installation_media -f ca-ps-installer.properties -i silent

Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges.

installation_media

Specifies the Policy Server installation executable.

Note: If the properties file is not in the same directory as the installation media, specify its location. Use double quotes if the argument contains spaces.

-i silent

Specifies that the installer run silently.

Example:

installation_media -f "C:\Program Files\CA\siteminder\install_config_info\ca-ps-installer.properties" -i silent

The installation begins. The installer uses the parameters that you specified in the properties file to install the Policy Server.

UNIX

Follow these steps:

  1. Open a shell.
  2. Run the following command from the directory to which you copied the Policy Server installation executable and Policy Server installation properties file:
    ./installation_media -f ca-ps-installer.properties -i silent
    
    installation_media

    Specifies the Policy Server installation executable.

    -i silent

    Specifies that the installer run silently.

    The installation begins. The installer uses the parameters that you specified in the properties file to install the Policy Server.

Troubleshoot the Policy Server Installation

Use the following files to troubleshoot the Policy Server installation: