Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Words and Phrases
| Search for | Example | Results |
|---|---|---|
| A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
|
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Using Boolean Operators
| Search for | Operator | Example |
|---|---|---|
|
Two or more words in the same topic |
|
|
| Either word in a topic |
|
|
| Topics that do not contain a specific word or phrase |
|
|
| Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
| A combination of search types | ( ) parentheses |
|
- Install and configure the standalone IdM service
- Prerequisite
- Task 1: Deploy IdM on a web application server
- Task 2: Configure SSL in the IdM web application server
- Task 3: Create an IdM client trust store
- Task 4: Configure SAML SSO
- Task 5: Configure a tenant and specify the ADFS metadata URL
- Task 6: Create an empty database for IdM
- Task 7: Configure database connection in the IdM service
- Task 8: Download the IdM metadata
- Task 9: Configure the IdM service for LW-SSO compatibility
- Task 10: Specify an IdM token signing key
- Task 11: Specify an IdM user account for Service Manager
- Task 12: Replace JRE policy files for the IdM server
- Task 13: Create a trust relationship with ADFS
- Task 14: Import the IdP public key into the IdM SAML keystore
- Task 15: Adjust the max authentication age setting in the IdM service
- Task 16: Encrypt IdM passwords and keys
Task 2: Configure SSL in the IdM web application server
Important This task is required for the standalone IdM only.
The IdM service requires the use of SSL connections. Once you have completed the deployment of the IdM web application server (Tomcat), you need to configure SSL for it.
To configure SSL for Tomcat, follow these steps:
-
Run the following keytool command to create a keystore file:
keytool -genkey -alias tomcat -keyalg RSA -keystore tomcat.keystore
Follow the screen prompts to enter required information.
Note When asked for your first and last names, enter the fully qualified domain name (FQDN) of the Tomcat server. For example: myhost.mycompany.net.
The following is an example.
C:\Tomcat\tomcat_9443>keytool -genkey -alias tomcat -keyalg RSA -keystore tomcat.keystore Enter keystore password: Re-enter new password: What is your first and last name? [Unknown]: myhost.mycompany.net What is the name of your organizational unit? [Unknown]: software What is the name of your organization? [Unknown]: hpe What is the name of your City or Locality? [Unknown]: shanghai What is the name of your State or Province? [Unknown]: shanghai What is the two-letter country code for this unit? [Unknown]: CN Is CN=myhost.mycompany.net, OU=software, O=hpe, L=shanghai, ST=shanghai, C=CN correct? [no]: yes Enter key password for <tomcat> (RETURN if same as keystore password): Re-enter new password: -
Run the following command to export a certificate from the keystore:
keytool -keystore tomcat.keystore -export -alias tomcat -file tomcat.cer
-
Run the following command to import the certificate into JDK:
keytool -import -alias idm -file tomcat.cer -keystore cacerts
Follow the screen prompts to enter required information. The following is an example.
Note The default keystore password is changeit.
C:\Program Files\Java\jdk1.8.0_91\jre\lib\security>keytool -import -alias idm -file tomcat.cer -keystore cacerts Enter keystore password: Owner: CN=myhost.mycompany.net, OU=software, O=hpe, L=shanghai, ST=shanghai, C=CN Issuer: CN=myhost.mycompany.net, OU=software, O=hpe, L=shanghai, ST=shanghai, C=CN Serial number: 5acc6d54 Valid from: Fri Jun 03 10:00:26 CST 2016 until: Thu Sep 01 10:00:26 CST 2016 Certificate fingerprints: MD5: 52:9F:9E:57:63:11:26:DB:0A:D4:99:0D:44:1B:A8:65 SHA1: 47:8E:26:C2:CA:0E:C2:B0:3C:D8:54:4F:70:93:44:F5:D6:6E:D6:1D SHA256: 5C:B0:98:10:7D:13:BE:D2:24:2C:C0:EF:F0:C5:F1:7F:87:6C:E7:0B:FA:22:4C:94:DE:46:EF:6C:0E:55:61:9B Signature algorithm name: SHA256withRSA Version: 3 Extensions: #1: ObjectId: 2.5.29.14 Criticality=false SubjectKeyIdentifier [ KeyIdentifier [ 0000: 9D DB 0D 2A 12 B9 41 6B 3D C7 66 86 3B 63 9E 98 ...*..Ak=.f.;c.. 0010: 02 D7 38 CE ..8. ] ] Trust this certificate? [no]: yes Certificate was added to keystore -
Configure the https port and keystore in the server.xml file in the <Tomcat>/conf folder:
<Connector port="9443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="/conf/tomcat.keystore" keystorePass="!qaz2wsx3edc" truststoreFile="/conf/tomcat.keystore" storePass="!qaz2wsx3edc" />Caution Be sure to enter the correct path of the tomcat.keytore file.
