17.7 Managing SAS Service Object

The SAS service object facilitates communication between a server and its server certificates. If you remove a server from an OpenText eDirectory tree, you also need to delete the SAS service object associated with that server. If you want to put the server back into the tree, you must create the SAS service object to go with that server. If you do not, you cannot create new server certificates.

The SAS service object is automatically created as part of the server health check. You should not need to create it manually.

You can create a new SAS service object only if there is not a properly named SAS service object in the same container as the server object. For example, for a server named WAKE, you will have a SAS service object named SAS Service - WAKE. The utility adds the DS pointers from the Server object to the SAS object, and from the SAS object to the Server object, as well as set up the correct ACL entries on the SAS service object.

If a SAS service object already exists with the proper name, you cannot create a new one. The old SAS service object’s DS pointers might be wrong or missing, or the ACLs might not be correct. In this case, you can delete the corrupt SAS service object and use OpenText Identity Console portal to create a new one.

17.7.1 Creating or Deleting an SAS Service Object

To create or delete an SAS service object, perform the following steps:

  1. Click Certificate Management > SAS Service Object options from the landing page.

  2. If there is no SAS Service Object created for an existing server, then click the icon to create a new one.

  3. A confirmation message appears indicating an SAS Service Object has been created successfully.

  4. To remove an SAS Service Object, click the icon.

  5. Click OK in the confirmation screen to remove an SAS Service Object successfully.