This documentation applies to the 8.0 version of Remedy Action Request System, which is in "End of Version Support." You will not be able to leave comments.

To view the latest version, select the version from the Product version menu.

Enabling LDAP plug-ins to establish SSL connections with LDAP servers

The AR System External Authentication (AREA) and AR System Database Connectivity (ARDBC) plug-ins use Secure Sockets Layer (SSL) certificates for authentication and encrypting data transmission. SSL encryption requires the use of a Certificate Authority (CA) and digital certificates to ensure the security and integrity of BMC Remedy Action Request (AR) System.

The following topics in this section explain how to add an SSL certificate to a certificate database by using the Certificate Database Tool (certutil included with Mozilla Network Security Services (NSS) shipped with BMC Remedy AR System), and how to troubleshoot and debug general SSL certificate issues:

NSS is a collection of open source libraries and tools based on open standards used by BMC for Internet security. The NSS library files are also included in your BMC Remedy AR System distribution at C:\Program Files\BMC Software\AR System. The certutil command line utility assists you with certificate selection and installation.

Note

This information is provided as a convenience only. BMC assumes that customers have a working certificate database. If you require a compiled version of certutil, contact your BMC Support representative.

For reference information about NSS libraries, see the Mozilla documentation http://www.mozilla.org/projects/security/pki/nss/. This image shows how the NSS libraries, certutil, and the certificate database work together.

Certificate database, certutil, and NSS libraries

When you configure LDAP plug-ins that use SSL connections, you must specify the directory that contains the certificate database. Ensure that the certificate database directory contains cert8.db or cert7.db and key3.db files, which are required for the LDAP plug-in configuration.

For information on configuring LDAP plug-ins, see these procedures:

NSS library support

The following table shows the NSS library versions used by BMC Remedy AR System. Release 3.11.4 or newer NSS libraries are preferred for any version of AR System.

AR System and NSS library compatibility

NSS library version number

Included with BMC Remedy AR System releases

3.11.4 or newer — This library creates cert8.db. However, it is fully backward compatible; it reads the cert7.db certificate database.

Release 7.5.00 and higher

3.4.2 — This library creates cert7.db.

Releases earlier than 7.5.00

NSS 3.11.4 binary distributions for AR System platforms

Source and binary distributions for BMC Remedy AR System release 7.5.00 and higher UNIX platforms may be downloaded at http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_4_RTM/

The following table lists supported binary files. The nss-3.11.4 directory for your platform will contain three subdirectories:

  • NSS header files are in the include subdirectory.
  • NSS shared libraries are in the lib subdirectory.
  • NSS utilities and test programs are in the bin subdirectory.

AR System supported platform NSS 3.11.4 binary files

UNIX platform distributions

Last modified date and time

HP-UXB.11.11_64_OPT.OBJ

22-Nov-2006 11:20

HP-UXB.11.23_ia64_64_OPT.OBJ

22-Nov-2006 11:23

Linux2.6_x86_64_glibc_PTH_OPT.OBJ

22-Nov-2006 11:23

SunOS5.9_64_OPT.OBJ

22-Nov-2006 11:24

For Windows NT use the nss-3.11.4.zip file in the WINNT5.0_OPT.OBJ directory at http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_4_RTM/msvc6.0/

NSS 3.4.2 binary distributions for AR System platforms

Source and binary distributions for BMC Remedy AR System releases earlier than 7.5.00 UNIX platform may be downloaded at http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_4_2_RTM/

The following table lists supported binary files. The nss-3.4.2 directory for your platform will contain three subdirectories:

  • NSS header files are in the include subdirectory.
  • NSS shared libraries are in the lib subdirectory.
  • NSS utilities and test programs are in the bin subdirectory.

AR System supported platform NSS 3.4.2 binary files

UNIX platform distributions

Last modified date and time

AIX4.3_OPT.OBJ

13-Jun-2002 11:38

HP-UXB.11.00_64_OPT.OBJ

13-Jun-2002 11:42

Linux2.4_x86_glibc_PTH_OPT.OBJ

13-Jun-2002 11:44

SunOS5.8_64_OPT.OBJ

13-Jun-2002 12:02

For Windows NT use the WINNT4.0_OPT.OBJ file last modified 13-Jun-2002 12:04.

Was this page helpful? Yes No Submitting... Thank you

Comments