This documentation applies to the 8.0 version of Remedy Action Request System, which is in "End of Version Support." You will not be able to leave comments.

To view the latest version, select the version from the Product version menu.

Certificate databases introduction

BMC Remedy AR System uses the Mozilla LDAP C SDK libraries to enable the AREA and ARDBC LDAP plug-ins to establish SSL connections with LDAP servers for login authentication, as shown in the runtime architecture diagram below. NSS requires that the LDAP server's certification authority (CA) certificate reside in a certificate database.

Configure certutil to generate:

  • New certificate databases
  • Certificate lists from the database
  • Certificate database additions

Note

NSS 3.11.4 shared libraries are backward compatible with all older NSS 3.x shared libraries.

When LDAP plug-ins that use SSL connections are configured, the cert8.db file should be configured to trust the certificate of the LDAP server and specify the directory that contains the certificate database. To start you must build certutil.

Runtime architecture

To build the certutil utility for NSS 3.11.4

  1. Browse and download the binary files for your operating system to a temporary location:
    https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_4_RTM/
  2. Extract the OPT release build file into a directory on the AR System server called c:\nss-3.11.4.
  3. Follow build instructions here:
    http://www.mozilla.org/projects/security/pki/nss/nss-3.11.4/nss-3.11.4-build.html
  4. For troubleshooting your build, go here:
    http://www.mozilla.org/projects/security/pki/nss/troubleshoot.html

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Comments