For the error 'Download of SDM Policy failed.', please check the below:
*******In CA SDM********
# Firstly, we need to create the policy through SDM and copy it into the correct folders.
Use the default Policy code as it is set in the Catalog(SC) UI at
Service Catalog > Administration > Configuration > CA Service Desk:
The property named 'Keystore name'
- Use the correct keystore name and a .P12 file with same name should be present in USMHOME
- e.g. CASM_POLICY.p12
The property named 'Policy Code'
- which is 'CASM_POLICY'. You may wish to use these to simplify.
# Then Copy the .p12 file into the correct folders
# Now, set the Service Catalog-properties accordingly.
==============================================================================
Below are the steps to create and configure the policy:
- To create the policy in SDM with the name as set in Service Catalog.
- Go to the Service Desk UI and login as administrator:
- Go to Administration > SOAP Web Service Policy > Policies
- When not existing, click 'Create New' button and set the properties:
- Symbol and Code to CASM_POLICY.
- Status to Active,
- Proxy Contact to "Administrator, Service Desk" (whichever userid is scadmin)
or "System_CASM_Admin" (which userid is CASMAdmin) or any other Service Catalog admin user
- Allow Impersonate to Yes
- other settings can be left as default.
- Click 'Save'. Click 'Close Window'.
- Go to Administration > SOAP Web Service Policy > Policies > Search to verify
Note:
While creating the webservice policy from service desk administration, the "Has key" field is set by default to "No" and is read only.
It is not possible to edit it.
The setting should/will get set to Yes automatically, after you create(d) the policy file itself in the next step.
You can open the policy in SDM to verify this after you created the .p12 file.
- Next, we need a certfile to be created for that policy.
6a. On the Service Desk machine, open the command prompt run 'nxcd' (This command is to go to SDM root folder) and then run this command "pdm_pki -p CASM_POLICY -f"
(replacing the policy code name with the custom one if you decided to use one).
6b. This will create CASM_POLICY.p12 (or equivalent for a custom policy) in that directory i.e %NX_ROOT% folder.
- Then Copy the .p12 file into the correct folders
- You then need to copy it to your Service Catalog machine's %USM_HOME% location/folder.
- Lastly, set the SC-properties accordingly.
- Then, back in the Catalog UI logged-in as 'scadmin' user (admin credential login):
- Goto Administration > Configuration > CA Service Desk
- Set Enable PKI to 'Yes'
- Ensure that the Keystore Name is set to CASM_POLICY.p12 (case sensitive)
- Ensure that the Policy Code is set to CASM_POLICY (case sensitive)
- Ensure that the Port Number is set to the SDM-port number
- Ensure that the Host Name is set as the 'single' hostname of the SDM-server
Now the 'Test' should then successfully use the certfile to connect to Service Desk.
I hope this helps!
Thanks
Junaid