Installation and Upgrade Guides › Directory Configuration Guide › OpenLDAP Server › Configure SSL for a Policy Store

Configure SSL for a Policy Store

Policy stores support Secure Socket Layers (SSL). You configure the policy store for SSL from the Policy Server Management Console.

The following procedure assumes:

• The OpenLDAP environment is configured for SSL.
• The certificate Authority's (CA) root certificate (cacert.pem) is installed on the Netscape cert7.db database on each machine that will use SSL to communicate with the directory server.
• A key3.db file has been created.

  Note: SiteMinder requires that the root certificate adheres to the Netscape file format. You cannot use Microsoft IE to install the certificate.

To configure SSL for a policy store

1. Start the Policy Server Management Console.
2. Click the Data tab.

   The Data tab opens.

3. Select Use SSL.
4. Enter the absolute path to cert7.db in the Netscape Certificate Database File field.

   Note: Consider the following:

   • A known limitation requires that the file name be included in the path. You can resolve this issue after providing a complete absolute path. Fix the path by removing the last substring (cert7.db) in the CertDbPath variable in the registry.
   • The key3.db file must also be in the same directory as the cert7.db file.
5. Click OK.

   SSL is enabled for the policy store.