Re: Implementation of SSL and SSO in service Manager 9.30 (516 Views)
Reply
Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 1 of 11 (595 Views)

Implementation of SSL and SSO in service Manager 9.30

Hi All,

 

One week before I installed the Service manager 9.30 and now i need to implement the SSL and SSO/Trusted Sign on can any one help me in that whats the process  and any link or document if any one can share?

 

 

Respected Contributor
Gaurav_gds
Posts: 198
Registered: ‎01-24-2013
Message 2 of 11 (590 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

Hi,

 

Find attached the document.


Assign Kudos by clicking on Star on your left ,if this post helped you in any manner...Thanks...

Gaurav
Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 3 of 11 (570 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

Thanks Gaurav,

 

but what if I only want to implement the SSL first and if there is any batch file also availbale to get all this done.

 

 

Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 4 of 11 (570 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

but what if I only want to implement the SSL first and if there is any batch file also available to get all this done.
Respected Contributor
Gaurav_gds
Posts: 198
Registered: ‎01-24-2013
Message 5 of 11 (565 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

Hi,

 

If you want to enable SSL, you do this by enabling ssl:1 parameter in sm.cfg file.

(This step is mentioned in the document).

 

You need to run these commands manually to create these certs.


Assign Kudos by clicking on Star on your left ,if this post helped you in any manner...Thanks...

Gaurav
Respected Contributor
Gaurav_gds
Posts: 198
Registered: ‎01-24-2013
Message 6 of 11 (563 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

Hi,

 

You can also use these batch files to create certs. Attached.

 

Found them in my archieves.

 

 

 


Assign Kudos by clicking on Star on your left ,if this post helped you in any manner...Thanks...

Gaurav
Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 7 of 11 (554 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

On running the following command  keytool -import -keystore ./cacerts -trustcacerts -file mycacert.pem -storepass changeit   in directory  C:\Program Files\Java\jdk1.6.0_45\jre\bin

 

I get the error file not found exception 

 

and when i run the same command under directory C:\OpenSSL-Win32\bin

 

I get the error keytool i not recog.... command

 

what I am doing wrong

Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 8 of 11 (552 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

The following first two commands gave no error message and ran successfully openssl genrsa -des3 -out cakey.pem 2048 openssl req -new -key cakey.pem -x509 -days 1095 -out mycacert.pem but the following command gave the "file not found exception" keytool -import -keystore ./cacerts -trustcacerts -file mycacert.pem -storepass changeit what wrong I am doing here?
Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 9 of 11 (529 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

Gaurav,

 

could you please help me in this issue

 

that y that I am getting this error?

 

what could be the possible reason?

 

Do i need to edit the  following command to provide some file path?

 

keytool -import -keystore ./cacerts -trustcacerts -file mycacert.pem -storepass changeit

Frequent Advisor
Hptoolsconfigur
Posts: 49
Registered: ‎05-20-2013
Message 10 of 11 (518 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

The Issue i was facing is resolved, My bad i had set wrong path of Java files in for PAH variabe.

 

any how I am facing another error now on the last step

 

i get the  error message "failed to establish a chain from reply" executing command 

 

keytool -import -trustcacerts -alias myserver -keystore ./servercert.keystore -file smserver_cert.pem

 

Do i need must to  have add the machine on som domain or domain installed on the machine. could this error be becuase of this?

 

 

Trusted Contributor
hansmaulwurf
Posts: 209
Registered: ‎07-12-2011
Message 11 of 11 (516 Views)

Re: Implementation of SSL and SSO in service Manager 9.30

Hi,

 

have you tried this one?

http://intactitsm.files.wordpress.com/2013/01/intact-technology-definitive-ssl-tso-guide.docx

The batch mentioned there was easy to use. Not sure where to get it. As i am out of office i can not provide it to you this week...

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.