Page History

Preparation

Windows

1. Create a management server certificate in PFX format with a private key (you need to issue a domain CA certificate) with the following attributes:
   1. Subject: Common name - <DNS name of the management server>
   2. Subject Alternative name:
      1. DNS - <DNS name of the management server>
      2. DNS - <DNS domain name>
         
         
2. Certificate Authority certificate in CRT format  (Base64)

Linux

1. Create certificates for each server on which you plan to install Axidian Privilege Indeed Identity PAM components (you need to issue a domain CA certificate) with the following attributes:
   1. Subject: Common name - <DNS name of the component server>
   2. Subject Alternative name:
      1. DNS - <DNS name of the component server>

      2. DNS - <DNS domain name>
         
         

         Warning
         Certificate attributes must be specified in lowercase.

         
         

2. Certificate Authority certificate in CRT format  (Base64)

   
   

Certificates Export

Windows

On the management server, add the management server certificate to the personal certificates.

Add the CA certificate to the trusted root certificates on all servers where Axidian Privilege Indeed Identity PAM components will be installed.

Linux

Export Axidian Privilege Indeed Identity PAM component server certificates in PFX format with the same private key for all certificates.

Export the certificate of the certification authority in CRT (Base64) format.