Index

A

access control

examples of   1

overview   1, 2

to navigation tree   1

Access Control Instruction, See ACI 1

Access Control List, defined   1

access log

defined   1

viewing in Console   1, 2

access permission, See ACI 1

access settings, for Administration Server   1, 2

ACI

bind rules   1

creating with ACI Editor   1, 2

defined   1

editing with ACI Editor   1

removing   1

See also ACI Editor 1

See also ACI Manager 1

See also ACL 1

ACI Editor

creating a new ACI with   1, 2

described   1

editing an existing ACI with   1

ACI Manager

described   1

opening   1

ACL, defined   1

admconfig

options   1

overview and syntax   1

tasks   1

usage examples   1

Admin Server, See Administration Server 1

admin_ip.pl, overview and usage   1

administration domain

changing user directory settings for   1

creating   1

creating and modifying   1, 2

defined   1

modifying   1

removing   1

Administration Server

access settings for   1, 2

changing IP address for, See admin_ip.pl 1

configuring from the command line, See admconfig 1

defined   1

directory settings for   1, 2

encryption settings for   1

installation of   1

instances of   1

logging options for   1

network settings for   1, 2

setting paths for log files   1

using SSL on   1

starting and restarting   1, 2

stopping   1

storage of URLs by Server Console   1

Administration Server Administrator

changing user name or password for   1

defined   1

administrators, overview of   1

algorithm, cryptographic   1

alias

directory containing certificate information   1

nickname for organizational unit   1

appearance, customizing Console's   1

attributes

defined   1

syntax   1

authentication

certificate-based   1, 2

client and server   1

used in form signing   1

during login to Console   1

password-based   1, 2

See also client authentication 1

See also server authentication 1

B

bind rules, See ACI 1

C

c, RDN keyword   1

CA

certificate   1

defined   1

hierarchies and root   1

trusted   1

trusted CA certificate   1

certificate database

backing up   1

restoring from a backup   1

certificate group

creating   1

defined   1

certificate request, sending as email   1

Certificate Revocation List, See CRL 1

certificate-based authentication, defined   1

certificates

authentication using   1

backing up   1

CA certificate   1

certificate database   1

chains   1

checking expiration date of   1

client   1, 2

contents of   1

generating renewal request for   1, 2

installing   1

issuing of   1

and LDAP Directory   1

use during login   1, 2

object-signing   1

overview of renewal   1

revoking   1

S/MIME   1

self-signed   1

server certificate   1

verifying a certificate chain   1

certmap.conf

defined   1

editing   1

examples   1

See also client authentication 1

cipher suites, defined   1

ciphers

choosing   1

defined   1

overview   1, 2

preferences   1

CKL

obtaining and using   1, 2

client authentication

client SSL certificates defined   1

enabling on Administration Server   1

logging in to Server Console using   1, 2

overview of   1, 2

preparing to use   1

setting up between servers   1

using certmap.conf   1, 2

Client Authentication for Users   1

cloning, defined   1

CmapLdapAttr, certmap.conf property   1

cn, RDN keyword   1

community string

adding with Server Console   1, 2

defined   1

Compromised Key List, See CKL 1

con[tinueOnError], option for admconfig   1

Configuration Administrator

changing user name or password for   1

defined   1

Configuration Administrators group

adding users to   1, 2

defined   1

configuration directory

changing settings for   1

defined   1

merging two   1, 2

overview   1

See also Directory Server 1

connection restrictions, defined   1

Console, See Server Console 1

countA[ccessLogEntries], admconfig task   1

countE[rrorLogEntries], admconfig task   1

CRL

managing   1

custom views

creating   1

overview   1

using   1, 2

customization, See preferences 1

D

dc, RDN keyword   1

digital signatures

defined   1

use of during SSL authentication   1

directory

changing the search directory   1

directory entries

creating   1, 2

removing   1

searching for   1

Directory Server

attributes   1

authenticating against   1

common attributes in   1

configuration subtree   1

DN and attribute syntax   1

failover support   1

installing   1

LDAP URL   1

mapping client certificate to   1, 2

merging two configuration directories   1, 2

role in managing resources and users   1

user subtree   1

See also configuration directory 1

See also user directory 1

display fonts, See fonts 1

display preferences, See preferences 1

distinguished name, See DN 1

DN

defined   1

overview   1

syntax   1

DNComps, certmap.conf property   1

dynamic group

creating   1

defined   1

E

email, signed and encrypted   1

enc[ryption], option for admconfig   1

encryption

defined   1

overview of SSL   1

public-key   1

settings for Administration Server   1

symmetric-key   1

using external devices   1

entries, See directory entries 1

error log

defined   1

viewing in Console   1

external security device

defined   1

See also security device 1

external token, See security device 1

F

failover

user directory support for   1

FilterComps, certmap.conf property   1

font profiles, See fonts 1

fonts

setting display   1, 2

form signing, defined   1

G

GET, type of SNMP message   1

getAc[cessLog], admconfig task   1

getAdd[resses], admconfig task   1

getAdminUI[D], admconfig task   1

getAdminUs[ers], admconfig task   1

getCa[cheLifetime], admconfig task   1

getCl[assname], admconfig task   1

getDe[faultAcceptLanguage], admconfig task   1

getDS[Config], admconfig task   1

getE[rrorLog], admconfig task   1

getH[osts], admconfig task   1

getO[neACLDir], admconfig task   1

getPo[rt], admconfig task   1

getSe[rverAddress], admconfig task   1

getSu[iteSpotUser], admconfig task   1

getU[GDSConfig], admconfig task   1

givenName, Directory Server attribute   1

groups

Configuration Administrators   1

creating certificate group   1

creating dynamic group   1

creating static group   1

defined   1, 2

editing   1

locating   1

removing   1

H

h[elp], option for admconfig   1

host information, modifying   1

host restriction, defined   1

I

i[nputFile], option for admconfig   1

information panel, defined   1

InitFn, certmap.conf property   1

installation

Administration Server   1

Directory Server   1

Express Mode   1

modes   1

of a stand-alone Console   1, 2

overview   1, 2

silent   1

uninstalling software   1

upgrading a stand-alone version of Server Console   1, 2

upgrading Administration Server and Console   1, 2

installation location   1

instance, See server instance 1

internal token, See security device 1

K

key-pairs, overview   1

keys

defined   1

management and recovery   1

L

l, RDN keyword   1

LDAP URL, contructing   1

ldapdelete, defined   1

ldapmodify, defined   1

ldapsearch, defined   1

library, certmap.conf property   1

logging in to Server Console   1

logs

setting new paths for   1

viewing access   1

viewing error   1

M

mail, Directory Server attribute   1

managed device, defined   1

management information base, See MIB 1

management window, opening for a server   1

Manual ACI Editor, See ACI Editor 1

master agent

configuring   1, 2

starting from the command line   1, 2

starting with Server Console   1

master agent, defined   1

members, adding to static group   1

menus, in Server Console   1

MIB

Administration Server   1

defined   1

N

native agent

defined   1

reconfiguring   1

restarting   1

navigation tree

custom views of   1

overview   1

setting access permissions to   1

network management station, defined   1

network settings, Administration Server   1, 2

O

o, RDN keyword   1

object signing   1

organizational units

creating   1, 2

removing   1

ou, RDN keyword   1

P

password

changing for a user or administrator   1, 2

using for authentication   1

password-based authentication, defined   1, 2

permission, See ACI 1

PKCS #11 module

defined   1

installing   1

removing   1

port number, defined   1

preferences

display   1, 2

font   1, 2

overview   1

UI permissions   1

private key, defined   1

proxy agent

defined   1

installing   1

starting   1

public key

cryptography   1

defined   1

infrastructure   1

management   1

R

r[estart], admconfig task   1

RA, See Registration Authority 1

RDN

defined   1

keywords   1

Registration Authority, defined   1

relative distinguished name, See RDN 1

renewal request, generating for certificate   1, 2

resources, defined   1

restart, Administration Server   1, 2

rules, See ACI 1

S

S/MIME certificate   1

searching

changing the search directory   1

for directory entries   1

Secure Sockets Layer, See SSL 1

security device

defined   1, 2

installing external   1

removing external   1

self-signed certificate   1

ser[ver], option for admconfig   1

server

cloning   1

defined   1

installing a new   1

opening a management window for   1

requesting a certificate for   1, 2

server certificate chain, defined   1

server certificate request, generating   1, 2

Server Console

defined   1

information panel   1

installing as a standalone application   1

menus   1

overview of   1, 2

storage of five Administration Server URLs   1

tabs   1

server group

changing user directory settings for   1

defined   1

modifying information for   1

server instance

Administration Server   1

creating   1

modifying information for   1

removing   1

See also server 1

server management window, See management window 1

ServerRoot. See installation location 1

SET, type of SNMP message   1

Set Permissions dialog box, described   1

setAc[cessLog], admconfig task   1

setAdd[resses], admconfig task   1

setAdminP[wd], admconfig task   1

setAdminUI[D], admconfig task   1

setAdminUs[ers], admconfig task   1

setCa[cheLifetime], admconfig task   1

setCl[assname], admconfig task   1

setDe[faultAcceptLanguage], admconfig task   1

setDS[Config], admconfig task   1

setE[rrorLog], admconfig task   1

set[Hosts], admconfig task   1

setO[neACLDir], admconfig task   1

setPo[rt], admconfig task   1

setSe[rverAddress], admconfig task   1

setSu[iteSpotUser], admconfig task   1

setU[GDSConfig], admconfig task   1

Setup Program   1

silent installation   1

single sign-on   1

slot, defined   1, 2

SMUX, defined   1

sn, RDN keyword   1

SNMP

community string   1

examples of message transfer   1

installing a proxy agent   1

managed devices defined   1

enabling master agent   1

master agent defined   1

messages defined   1

MIB defined   1

multiplexing protocol (SMUX) defined   1

native agent defined   1

network management station defined   1

overview   1, 2

proxy agent   1

proxy agent defined   1

setting up   1, 2

setting up on Windows NT   1

starting a proxy agent   1

enabling subagent   1

subagent defined   1

trap destinations   1

See also master agent 1

See also subagent 1

SNMP master agent, See master agent 1

SNMP native agent, See native agent 1

SNMP proxy agent, See proxy agent 1

SNMP subagent, See subagent 1

SSL

activating on the server   1

using with Administration Server   1

backward compatibility of   1

ciphers, See ciphers 1

client   1, 2

client certificates   1

defined   1

editing certmap.conf   1

examples of certmap.conf   1

external security device   1

generating a certificate request   1, 2

internal security device   1

overview of protocol   1, 2

preparing to set up   1

sending a manual certificate request   1

slots and security devices   1

st, RDN keyword   1

st[op], admconfig task   1

stand-alone Console, installation   1, 2

static group

creating   1

defined   1

streetAddress, Directory Server attribute   1

subagent

defined   1

See also SNMP 1

synchronization options

enabling   1

overview   1

setting   1, 2

sysContact, defining in master agent CONFIG file   1

sysLocation, defining in master agent CONFIG file   1

T

tabs, in Server Console   1

target, See ACI 1

TCP/IP, defined   1

telephoneNumber, Directory Server attribute   1

title, Directory Server attribute   1

TLS

defined   1

See also SSL 1

To Set Up Client Authentication for Users   1

token, See security device 1

topology

defined   1

See also navigation tree 1

Transport Layer Security, See TLS 1

trap messages, defined 1

traps

adding destination with Server Console   1

See also SNMP 1

See also trap messages 1

trusted CA, defined   1

U

u[ser], option for admconfig   1

uid, Directory Server attribute   1

uninstallation   1

upgrade

of a stand-alone version of Server Console   1, 2

See also installation 1

user authentication, See authentication 1

user directory

failover support   1

overview   1

settings   1

See also Directory Server 1

user entries

administrators   1

changing passwords for   1

creating   1

editing   1

locating   1

preferred language of   1

removing   1

userPassword, Directory Server attribute   1

Users and Groups tab, changing the search directory for   1

V

verb[ose], option for admconfig   1

verifycert, certmap.conf property   1

vers[ion], option for admconfig   1

view, See custom views 1

viewA[cessLogEntries], admconfig task   1

viewE[rrorLogEntries], admconfig task   1

Visual ACI Editor, See ACI Editor 1