Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Words and Phrases
| Search for | Example | Results |
|---|---|---|
| A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
|
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Using Boolean Operators
| Search for | Operator | Example |
|---|---|---|
|
Two or more words in the same topic |
|
|
| Either word in a topic |
|
|
| Topics that do not contain a specific word or phrase |
|
|
| Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
| A combination of search types | ( ) parentheses |
|
Enable SRC for Common Access Cards
To enable Common Access Cards for Service Request Catalog, follow these steps:
-
Enable CAC in Service Manager. To do this, use the
cacsignon parameter from a Service Manager command line, or specify it in thesm.inifile.Command line: sm -httpPort:13080 -cacsignon:1 Initialization file: cacsignon:1
For more information on this parameter, see Parameter: cacsignon.
-
Complete the following tasks from the "Example: enabling CAC sign-on" section of the Service Manager Help Server.
Task 1: Enable required SSL encryption and trusted clients. Task 2: Enable CAC sign-on in the SM server. Task 5: Connect your web application server to the web server. Task 6: Configure your web application server to use SSL. Task 7: Configure the web server to use SSL. Task 8: Create operator records for CAC users Task 9: Configure web browsers to enable web client users to use CAC. Task 10: Test your CAC sign-on setup.
Note
- When you perform "Task 1: Enable required SSL encryption and trusted clients", you are referred to "Example: Enabling required SSL encryption and trusted clients" section of the Service Manager Help Center. You need to copy the keystore files generated at step 9 of this procedure to the WEB-INF folder in your Service Request Catalog deployment or, if needed, to a folder that you plan to specify in the
applicationContext.propertiesfile. - Tasks 3 and 4, which are missing from the preceding list, refer to the configuration of the Service Manager Web tier and Windows client, and are not a consideration for Service Request Catalog.
- If you choose to use CAC, make sure that you have configured Service Request Catalog to use SSL and either TSO or LW-SSO (as appropriate for your environment) as described in the Service Manager upgrade documentation.
- When you perform "Task 1: Enable required SSL encryption and trusted clients", you are referred to "Example: Enabling required SSL encryption and trusted clients" section of the Service Manager Help Center. You need to copy the keystore files generated at step 9 of this procedure to the WEB-INF folder in your Service Request Catalog deployment or, if needed, to a folder that you plan to specify in the
The following tables show a summary of how your property files should be configured after you have enabled CAC:
| Configure these properties | Comments |
|---|---|
|
sm.protocol= sm.hostname= sm.port=13443 src.trustStore= src.trustStorePassword= src.keyStore= src.keyStorePassword= |
Enables two-way SSL between and Service Manager. Note The keys are generated when you complete "Task 1: Enable required SSL encryption and trusted clients." See the previous note for details. sm.protocol=https sm.hostname=[FQDN] sm.port=13443 src.trustStore=C:\\client\\cacerts src.trustStorePassword=changeit src.keyStore=C:\\client\\src.keystore src.keyStorePassword=clientkeystore |
src.security.mode=cac src.security.cac=true |
Enables CAC. |
src.security.secureLogin=true src.security.sslPort=8443 |
Enables SSL Connection between Service Request Catalog and the end user's client browser. |
| Configure these properties | Comments |
|---|---|
certificateFieldExtractDN=Subject.CN |
This parameter is used to get the field in the certificate that stores the login name. If the DN is from one of the fields in the Subject, set this parameter using the following format: Subject.CN Subject.CN means extracting the DN from the Common Name field in Subject. |
|
validationStrategy=1 |
Client Certificate Verification Sequence is as follows:
|
RootCertPath= |
Specifies file path to the issuer CA certificate. This is a mandatory property. Example: RootCertPath=C:/client/CAC/hp_ca_for_cac.cer |
CRLRefreshScheduler= |
Specifies a schedule in minutes for CRL refresh, if CRL check is enabled. Example: CRLRefreshScheduler=1440 |
CRLDownloadURL= |
The URL that identifies the location of the CRL. If it is not specified, the CRL Distribution Point from the certificate being validated will be used. This behavior will slow performance dramatically. CRLDownloadURL=http://onsitecrl.example.com/LatestCRL.crl |
CRLStoreLocation= |
Specifies the CRL file path. |
OCSPResponderURL= |
The URL that identifies the location of the OCSP responder. By default, the location of the OCSP responder is determined implicitly from the certificate being validated. This property is used when the Authority Information Access extension (defined in RFC 3280) is absent from the certificate or when it requires overriding. OCSPResponderURL=http://ocsp.example.net:80 |
