Installation and Upgrade Guides › Policy Server Installation Guide › Configuring LDAP Directory Servers as a Policy or Key Store › CA Directory as a Policy Store

CA Directory as a Policy Store

CA Directory can function as a policy store. A single directory server instance can function as a:

• Policy store
• Key store

Using a single directory server simplifies administration tasks. The following sections provide instruction on how to configure a single directory server instance to store policy data and encryption keys. If your implementation requires, you can configure a separate key store.

Gather Directory Server Information

Configuring a CA Directory as a policy store requires specific directory server information.

Note: Policy and data store worksheets are provided to help you gather and record information before configuring or upgrading a SiteMinder data store. You can print the applicable worksheet and can use it to record required information before beginning.

Gather the following information before configuring the policy store. You can use the Policy Store Worksheets to record your values.

• Host information—Determine the fully qualified host name or the IP address of the system on which CA Directory is running.
• DSA port number—Determine the port on which the DSA is to listen.
• Base DN—Determine the distinguished name of the node in the LDAP tree in which policy store objects are to be defined.
• Administrative DN—Determine the LDAP user name of the account that SiteMinder is to use manage objects in the DSA.
• Administrative password—Determine the password for the administrative user.

More information:

CA Directory Information Worksheet