To Create a Non-default Self-Signed Certificate for Directory Proxy Server

When you create a Directory Proxy Server instance, a default self-signed certificate is automatically provided. If you want to create a self-signed certificate with non-default settings, use this procedure.

The procedure creates the public and private key pair for a server certificate, where the public key is signed by Directory Proxy Server. A self-signed certificate is valid for three months.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. To create a non-default self-signed certificate for Directory Proxy Server, type:

   $ dpadm add-selfsign-cert instance-path cert-alias

   where cert-alias is the name of the self-signed certificate.

   For example, you could create a certificate called my-self-signed-cert as follows:

   $ dpadm add-selfsign-cert /local/dps my-self-signed-cert

   For a description of all command options, see the dpadm(1M) man page or type dpadm add-selfsign-cert --help at the command line.