Identity Portal - Keystore file

[William Cheang]

Hi Team,
CA Identity Suite 14.3
In my Identity Portal, i need to create a self service custom form that will query a 3rd party LDAP server using LDAPS(port:636).
In this case, how can i install server certificate into Identity Portal ?
(As i understand, if i want to connect Ldaps(636), i need to install that server cert)

I can't find any keystore file in Identity Portal. Can anyone advice ?

regards,
William

[Scott Owens]

sigma.encryption.keystoreLocation

sigma.keystore path; e.g. /IdentityPortal/sigma-keystore-tool/sigma.keystore

https://docops.ca.com/ca-identity-portal/14-2/en/upgrading/upgrading-ca-identity-portal/update-the-jvm-arguments

------------------------------
Best regards,

Scott Owens
Sr Support Engineer
Enterprise Software Division
Broadcom Inc.
------------------------------

[William Cheang]

thanks Scott, the keystore seem to be password protected, do u know the standard password ?

[Iyes Dendeni]

Try changeme

[William Cheang]

i tried with keytool command to import my server cert but i got the error File Format not recognize and based on the description 
'sigma.encryption.keystoreLocation", the keystore file is encrypted. That's why the keytool can't work.

sigma.keystore: Java JCE Keystore

How can i import my server cert to a encrypted keystore ?

[William Cheang]

The reason why i asked for keystore file for Identity Portal is because am writing a portal plugins that will query a LDAPS(port 636) server instead of normal LDAP(389) server.

and am gettting the error "Simple Bind failed"
Root exception is ... PKIX path building failed.... SunCertPathBuilderException: unable to find valid certification path to request target

[Iyes Dendeni]

If you are using the vApp, it should be $JAVA_HOME/jre/lib/security/cacerts

[William Cheang]

thanks Lyes, i will try it.