Sun Java System Portal Server 7.1 Configuration Guide

Installing the Gateway with Portal Server in the SSL Mode

Installing the Gateway with Portal Server in SSL mode allows the user, in the same Intranet where Portal Server is installed, to access Portals through a secure protocol.

Figure 6–2 Portal Server in the SSL mode

The user accesses Portal Server through the gateway.

ProcedureTo Install Gateway with Portal Server in SSL

  1. Import the root Certificate Authority (CA) to the certificate database.


    cd /usr/jdk/entsys-j2se/jre/lib/security
    /usr/jdk/entsys-j2se/jre/bin/keytool -keystore
    cacerts -keyalg RSA -import -trustcacerts -alias
    alias-name -storepass store-password -file
    file-name-path
    
  2. Start the Java ES installer and install the Gateway and Access Manager SDK.

  3. Create a certificate signing request.

    1. Run the following command:

      PortalServer_base/SUNWportal/bin/certadmin -n default

    2. Select Option 2 in the command-line interface.

    3. Type the details and save the certificate request in a file.

  4. Get this certificate signed by the Certificate Authority.

    The Certificate Authority will be the Portal Server Administrator.

  5. Create a file on the Gateway node, and paste the certificate response.

  6. Add the signed certificate to the certificate database of Gateway.

    1. Run the following command:

      PortalServer_base/SUNWportal/bin/certadmin -n default

    2. Select Option 4 in the command-line interface.

  7. Add the Root Certificate Authority to the certificate database.

    1. Run the following command:

      PortalServer_base/SUNWportal/bin/certadmin -n default

    2. Select Option 3 in the command-line interface.

    3. Provide the path for the Root Certificate Authority.

      The following message is displayed, “Successfully added.”

  8. Restart the Gateway.

    PortalServer_base/SUNWportal/bin/psadmin switch-sra-status -u admin-user-name -f password-file on

    PortalServer_base/SUNWportal/bin/psadmin provision-sra -u admin-user-name -f password-file --gateway-profile gateway_profile --enable

    PortalServer_base/SUNWportal/bin/psadmin start-sra-instance -u admin-user-name -f password-file -N default -t gateway