Sun Java System Portal Server Secure Remote Access 7.2 Administration Guide

ProcedureTo Configure Netlet for PDC

  1. Add com.iplanet.authentication.modules.cert.gwAuthEnable=yes anywhere in /ect/opt/SUNWam/config/AMConfig.properties file on the Portal Server machine.

  2. Import the Required Certificates into the certificate database of the Gateway to be PDC enabled.

  3. Import the Root CA certificate on the gateway machine.

  4. Add the CA certificate to your gateway profile.


    Tip –

    Create your own gateway profile to test PDC.


    Perform the following to steps to add the certificate to your gateway profile.

    1. Gateway Install Directory/SUNWportal/bin/certadmin -n gateway profile name

      Certadmin menu will be listed.

    2. Select Option 3.

    3. Provide the certificate path.

      Certificate added message will display.

  5. Generate a Certificate Signing Request for submitting to the CA.

    Perform the following steps to generate a Certificate Signing Request:

    1. Gateway Install Directory/SUNWportal/bin/certadmin -n gateway profile name

      Certadmin menu will be listed.

    2. Select Option 2.

    3. Provide appropriate answers to the questions.

    4. Save the request in a file.

  6. Submit the Certificate Signing Request to a CA and get it approved.


    Tip –

    Save the certificate signing response after CA signing.


  7. Import the CA approved Server Certificate.

    Perform the following steps to import the Server Certificate:

    1. Gateway Install Directory/SUNWportal/bin/certadmin -n gateway profile name

      Certadmin menu will be listed.

    2. Select Option 4.

    3. Provide the location of the file containing the Server Certificate.

  8. Import the Root CA certificate to the Portal Server machine.

    • For Application Server use the following command to add root-ca.

      ./certutil -A -n rootca -t "TCu,TCu,TCuw" -d /var/opt/SUNWappserver/domains/domain1/config -a -i path to root-ca