6.1 Enabling SSL Connection for User Application

Perform the following steps to enable SSL connectivity for the User Application:

  1. Log in to the server where you have installed User Application.

  2. Get the Sentinel Log Manager certificate and upload to keystore using the following command:

    echo | openssl s_client -connect <sentinel ip>:1443 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > slm.pem

  3. Add the certificate to the keystore.

    For example, use the following command:

    keytool -import -file slm.pem -keystore slm.jks -alias <alias name>

    Choose to trust the certificate and set a password when prompted.

  4. Add the generated keystore to idm.jks in the User Applications server.

    For Linux: 

    keytool -importkeystore -srckeystore <path of slm.jks> -srcstorepass <password> -destkeystore /opt/netiq/idm/apps/tomcat/conf/idm.jks -deststorepass <password>

    For Windows: 

    keytool -importkeystore -srckeystore <path of slm.jks> -srcstorepass <password> -destkeystore C:\NetIQ\idm\apps\tomcat\conf\idm.jks -deststorepass <password>

  5. Update the following attributes in the idmuserapp_logging.xml and workflow_logging.xml files:

    • SyslogHost to the IP address of the Sentinel server

    • SyslogPort to 1443

    • SyslogProtocol to SSL

    • SyslogSslKeystoreFile to the path of the idm.jks keystore

    • SyslogSslKeystorePassword to the keystore password

  6. Log in to Identity Manager Dashboard and perform the following steps:

    1. Go to Configuration > Logging > Auditing Configuration.

    2. Select Enable CEF format and specify the sentinel server details.

    3. Select Use TLS and specify the idm.jks keystore path and password.

    4. Click Apply.

  7. Restart Tomcat.

The next step is to define which events to log. Proceed to Managing Identity Manager Events.