Index

A

access control

examples of 1

overview 1, 2

to navigation tree 1

Access Control Instruction, See ACI1

Access Control List, defined 1

access log

defined 1

viewing in Console 1

viewing with Administration Express 1

access permission, See ACI1

access settings, for Administration Server 1, 2

ACI

bind rules 1

creating with ACI Editor 1, 2

defined 1

editing with ACI Editor 1

removing 1

See also ACI Editor1

See also ACI Manager1

See also ACL1

ACI Editor

creating a new ACI with 1, 2

described 1

editing an existing ACI with 1

ACI Manager

described 1

opening 1

ACL, defined 1

add, command for modutil 1

admconfig

options 1

overview and syntax 1

tasks 1

usage examples 1

Admin Server, See Administration Server1

admin_ip.pl, overview and usage 1

administration domain

changing user directory settings for 1

creating 1

creating and modifying 1, 2

defined 1

modifying 1

removing 1

Administration Express

accessing 1

overview and usage 1, 2

setting the refresh rate for 1, 2

starting or stopping server instances with 1

viewing access and error logs in 1

viewing basic server information in 1

administration page, using 1

Administration Server

access settings for 1, 2

changing IP address for, See admin_ip.pl1

configuring from the command line, See admconfig1

defined 1

directory settings for 1, 2

encryption settings for 1

installation of 1

instances of 1

logging options for 1

network settings for 1, 2

setting paths for log files 1

using SSL on 1

starting and restarting 1, 2

stopping 1

storage of URLs by iPlanet Console 1

Administration Server Administrator

changing user name or password for 1

defined 1

administrators, overview of 1

algorithm, cryptographic 1

alias

directory containing certificate information 1

nickname for organizational unit 1

appearance, customizing Console's 1

attributes

defined 1

syntax 1

authentication

certificate-based 1, 2

client and server 1

used in form signing 1

during login to Console 1

password-based 1, 2

See also client authentication1

See also server authentication1

B

bind rules, See ACI1

C

c, RDN keyword 1

CA

certificate 1

defined 1

hierarchies and root 1

trusted 1

trusted CA certificate 1

Certificate Authority Workstation, defined 1

Certificate Authority, See CA.1

certificate database

backing up 1

restoring from a backup 1

certificate group

creating 1

defined 1

certificate request, sending as email 1

Certificate Revocation List, See CRL1

certificate-based authentication, defined 1

certificates

authentication using 1

backing up 1

CA certificate 1

certificate database 1

chains 1

checking expiration date of 1

client 1, 2

contents of 1

generating renewal request for 1, 2

installing 1

issuing of 1

and LDAP Directory 1

use during login 1, 2

object-signing 1

overview of renewal 1

revoking 1

S/MIME 1

self-signed 1

server certificate 1

verifying a certificate chain 1

certmap.conf

defined 1

editing 1

examples 1

See also client authentication1

changepw, command for modutil 1

cipher suites, defined 1

ciphers

choosing 1

defined 1

option for modutil 1

overview 1, 2

preferences 1

CKL

obtaining and using 1, 2

client authentication

client SSL certificates defined 1

enabling on Administration Server 1

logging in to iPlanet Console using 1, 2

overview of 1, 2

preparing to use 1

setting up between servers 1

using certmap.conf 1, 2

Client Authentication for Users 1

cloning, defined 1

CmapLdapAttr, certmap.conf property 1

cn, RDN keyword 1

community string

adding with iPlanet Console 1, 2

defined 1

Compromised Key List, See CKL1

con[tinueOnError], option for admconfig 1

Configuration Administrator

changing user name or password for 1

defined 1

Configuration Administrators group

adding users to 1, 2

defined 1

configuration directory

changing settings for 1

defined 1

merging two 1, 2

overview 1

See also Directory Server1

connection restrictions, defined 1

Console, See iPlanet Console1

countA[ccessLogEntries], admconfig task 1

countE[rrorLogEntries], admconfig task 1

create, command for modutil 1

CRL

defined 1

managing 1

crypto cards

certification process 1

used by Fortezza 1

custom views

creating 1

overview 1

using 1, 2

customization, See preferences1

D

dbdir, option for modutil 1

dc, RDN keyword 1

default, command for modutil 1

delete, command for modutil 1

digital signatures

defined 1

use of during SSL authentication 1

directory

changing the search directory 1

directory entries

creating 1, 2

removing 1

searching for 1

Directory Server

attributes 1

authenticating against 1

common attributes in 1

configuration subtree 1

DN and attribute syntax 1

failover support 1

installing 1

LDAP URL 1

mapping client certificate to 1, 2

merging two configuration directories 1, 2

role in managing resources and users 1

user subtree 1

See also configuration directory1

See also user directory1

disable, command for modutil 1

disableD[SGWAccess], admconfig task 1

display fonts, See fonts1

display preferences, See preferences1

distinguished name, See DN1

DN

defined 1

overview 1

syntax 1

DNComps, certmap.conf property 1

dynamic group

creating 1

defined 1

E

email, signed and encrypted 1

enable, command for modutil 1

enableD[SGWAccess], admconfig task 1

enc[ryption], option for admconfig 1

encryption

defined 1

overview of SSL 1

public-key 1

settings for Administration Server 1

symmetric-key 1

using external devices 1

entries, See directory entries1

error log

defined 1

viewing in Console 1, 2

viewing with Administration Express 1

external security device

defined 1

See also security device1

external token, See security device1

F

failover

user directory support for 1

FilterComps, certmap.conf property 1

fips, command for modutil 1

font profiles, See fonts1

fonts

setting display 1, 2

force, command for modutil 1

form signing, defined 1

Fortezza

crypto cards 1

defined 1

enabling 1

G

GET, type of SNMP message 1

getAc[cessLog], admconfig task 1

getAdd[resses], admconfig task 1

getAdminUI[D], admconfig task 1

getAdminUs[ers], admconfig task 1

getCa[cheLifetime], admconfig task 1

getCl[assname], admconfig task 1

getDe[faultAcceptLanguage], admconfig task 1

getDS[Config], admconfig task 1

getE[rrorLog], admconfig task 1

getH[osts], admconfig task 1

getO[neACLDir], admconfig task 1

getPo[rt], admconfig task 1

getSe[rverAddress], admconfig task 1

getSu[iteSpotUser], admconfig task 1

getU[GDSConfig], admconfig task 1

givenName, Directory Server attribute 1

global keys, See JAR information file1

groups

Configuration Administrators 1

creating certificate group 1

creating dynamic group 1

creating static group 1

defined 1

editing 1

locating 1

removing 1

H

h[elp], option for admconfig 1

help, getting from within Console 1, 2

host information, modifying 1

host restriction, defined 1

HTML-based administration, using Administration Express 1, 2

I

i[nputFile], option for admconfig 1

information panel, defined 1

InitFn, certmap.conf property 1

installation

Administration Server 1

Directory Server 1

Express Mode 1

modes 1, 2

of a stand-alone Console 1, 2

overview 1, 2

silent 1

uninstalling iPlanet software 1, 2

upgrading a stand-alone version of iPlanet Console 1, 2

upgrading Administration Server and Console 1, 2

installdir, option for modutil 1

instance, See server instance1

internal token, See security device1

iPlanet Console

defined 1

information panel 1

installing as a standalone application 1

logging in to ??-1

menus 1

overview of 1, 2

storage of five Administration Server URLs 1

tabs 1

iPlanet Setup Program 1

J

JAR information file

global keys 1, 2

per-file keys 1, 2

per-platform keys 1, 2

syntax 1, 2

using with modutil 1, 2

See also modutil1

jar, command for modutil 1

K

key-pairs, overview 1

keys

defined 1

management and recovery 1

L

l, RDN keyword 1

LDAP URL, contructing 1

ldapdelete, defined 1

ldapmodify, defined 1

ldapsearch, defined 1

libfile, option for modutil 1

library, certmap.conf property 1

list, command for modutil 1

Litronic cryptographic module 1

logging in to iPlanet Console 1

logs

setting new paths for 1

viewing access 1

viewing error 1

M

mail, Directory Server attribute 1

managed device, defined 1

management information base, See MIB1

management window, opening for iPlanet server 1

Manual ACI Editor, See ACI Editor1

master agent

configuring 1, 2

starting from the command line 1, 2

starting with iPlanet Console 1

master agent, defined 1

mechanisms, option for modutil 1

members, adding to static group 1

menus, in iPlanet Console 1

MIB

Administration Server 1

defined 1

modutil

commands 1, 2

options 1, 2

overview and syntax 1, 2

usage examples 1, 2

using JAR information file with 1, 2

See also JAR information file1

N

native agent

defined 1

reconfiguring 1

restarting 1

navigation tree

custom views of 1

overview 1

setting access permissions to 1

network management station, defined 1

network settings, Administration Server 1, 2

newpwfile, option for modutil 1

nocertdb, option for modutil 1

O

o, RDN keyword 1

object signing 1

organizational units

creating 1

removing 1

ou, RDN keyword 1

P

password

changing for a user or administrator 1, 2

using for authentication 1

password-based authentication, defined 1, 2

per-file keys, See JAR information file1

permission, See ACI1

per-platform keys, See JAR information file1

PKCS #11 module

defined 1

installing 1

removing 1

port number, defined 1

pre-4.0 server

adding to navigation tree 1, 2

migrating to newer version 1, 2

preferences

display 1, 2

font 1, 2

overview 1

UI permissions 1

private key, defined 1

proxy agent

defined 1

installing 1

starting 1

public key

cryptography 1

defined 1

infrastructure 1

management 1

pwfile, option for modutil 1

R

r[estart], admconfig task 1

RA, See Registration Authority1

RDN

defined 1

keywords 1

refresh rate, setting for Administration Express 1, 2

Registration Authority, defined 1

relative distinguished name, See RDN1

renewal request, generating for certificate 1, 2

resources, defined 1

restart, Administration Server 1, 2

rules, See ACI1

S

S/MIME certificate 1

searching

changing the search directory 1

for directory entries 1

sec-activate, overview and syntax 1

sec-migrate, overview and syntax 1

Secure Sockets Layer, See SSL1

security device

defined 1, 2

installing external 1

removing external 1

Security Module Database Tool, See modutil1

self-signed certificate 1

ser[ver], option for admconfig 1

server

adding a pre-4.0 1

cloning 1

defined 1

installing a new 1

opening a management window for 1

requesting a certificate for 1, 2

starting and stopping with Administration Express 1

server certificate chain, defined 1

server certificate request, generating 1, 2

server group

changing user directory settings for 1

defined 1

modifying information for 1

server instance

Administration Server 1

creating 1

modifying information for 1

removing 1

See also server1

server management window, See management window1

server, pre-4.0

migrating from 1

SET, type of SNMP message 1

Set Permissions dialog box, described 1

setAc[cessLog], admconfig task 1

setAdd[resses], admconfig task 1

setAdminP[wd], admconfig task 1

setAdminUI[D], admconfig task 1

setAdminUs[ers], admconfig task 1

setCa[cheLifetime], admconfig task 1

setCl[assname], admconfig task 1

setDe[faultAcceptLanguage], admconfig task 1

setDS[Config], admconfig task 1

setE[rrorLog], admconfig task 1

set[Hosts], admconfig task 1

setO[neACLDir], admconfig task 1

setPo[rt], admconfig task 1

setSe[rverAddress], admconfig task 1

setSu[iteSpotUser], admconfig task 1

setU[GDSConfig], admconfig task 1

Setup Program 1

silent installation 1

single sign-on 1

slot, defined 1, 2

slot, option for modutil 1

SMUX, defined 1

sn, RDN keyword 1

SNMP

community string 1

examples of message transfer 1

installing a proxy agent 1

managed devices defined 1

enabling master agent 1

master agent defined 1

messages defined 1

MIB defined 1

multiplexing protocol (SMUX) defined 1

native agent defined 1

network management station defined 1

overview 1, 2

proxy agent 1

proxy agent defined 1

setting up 1, 2

setting up on Windows NT 1

starting a proxy agent 1

enabling subagent 1

subagent defined 1

trap destinations 1

See also master agent1

See also subagent1

SNMP master agent, See master agent1

SNMP native agent, See native agent1

SNMP proxy agent, See proxy agent1

SNMP subagent, See subagent1

SSL

activating on Netscape and iPlanet servers 1

using with Administration Server 1

backward compatibility of 1

ciphers, See ciphers1

client 1, 2

client certificates 1

defined 1

editing certmap.conf 1

examples of certmap.conf 1

external security device 1

generating a certificate request 1, 2

internal security device 1

overview of protocol 1, 2

preparing to set up 1

sending a manual certificate request 1

slots and security devices 1

st, RDN keyword 1

st[op], admconfig task 1

stand-alone Console, installation 1, 2

static group

creating 1

defined 1

streetAddress, Directory Server attribute 1

subagent

defined 1

See also SNMP1

synchronization options

enabling 1

overview 1

setting 1, 2

sysContact, defining in master agent CONFIG file 1

sysLocation, defining in master agent CONFIG file 1

T

tables

changing column position in 1

changing width of columns in 1

customizing 1, 2

tabs, in iPlanet Console 1

target, See ACI1

TCP/IP, defined 1

telephoneNumber, Directory Server attribute 1

tempdir, option for modutil 1

title, Directory Server attribute 1

TLS

defined 1

See also SSL1

To Set Up Client Authentication for Users 1

token, See security device1

topology

defined 1

See also navigation tree1

Transport Layer Security, See TLS1

trap messages, defined1

traps

adding destination with iPlanet Console 1

See also SNMP1

See also trap messages1

trusted CA, defined 1

U

u[ser], option for admconfig 1

uid, Directory Server attribute 1

undefault, command for modutil 1

uninstallation 1, 2

upgrade

of a stand-alone version of iPlanet Console 1, 2

See also installation1

user authentication, See authentication1

user directory

failover support 1

overview 1

settings 1

See also Directory Server1

user entries

administrators 1

changing passwords for 1

creating 1

editing 1

locating 1

preferred language of 1

removing 1

userPassword, Directory Server attribute 1

Users and Groups tab, changing the search directory for 1

V

verb[ose], option for admconfig 1

verifycert, certmap.conf property 1

vers[ion], option for admconfig 1

view, See custom views1

viewA[cessLogEntries], admconfig task 1

viewE[rrorLogEntries], admconfig task 1

Visual ACI Editor, See ACI Editor1