Provisioning an authentication certificate for the reports server

This topic describes how to provision the reports server with an authentication certificate.

• Command format
• Provisioning the reports server with a PKCS#12 trust store

A default installation of 

sets up a  Authentication Service called BMC SARA Authentication. The reports server accesses the BMC SARA Authentication Service to authenticate a user and acquire single sign-on (SSO) credentials in the name of the authenticating user.

By default, the mkcertstore utility extracts and uses the SSL certificate that was created during the 

installation. During the installation, you are prompted to provide a certificate password.

Command format

The installation program runs the following command on Microsoft Windows:

The installation program runs the following command on UNIX:

where,

• <hostName> stands for host name of the reports server computer.
• <certificatePassword> stands for the certificate password.

Provisioning the reports server with a PKCS#12 trust store

1. On the reports server, use the mkpkcs12 utility to generate a PKCS#12 trust store as follows:

   • (Windows) Enter the following command from the BDSSAInstallationDirectory\bin directory:

     mkpkcs12.exe C:\client_keystore.pkcs12

   • (UNIX) Enter the following command from the BDSSAInstallationDirectory/br directory:

     ./mkpkcs12 /root/client_keystore.pkcs12

     The mkpkcs12 utility generates a file called client_keystore.pkcs12 at the location that you have specified.

2. Copy the client_keystore.pkcs12 file to the following location on the reports server:
   • (Windows) BDSSAInstallationDirectory\security

   • (UNIX) BDSSAInstallationDirectory/security

     Warning

     Note

     Create the securities folder, if it does not exist, and copy the file into the folder.

3. Restart the reports server (see Restarting-the-reports-server).

For information about administering security for 

, see Administering-security.