To allow distributed searches across multiple Change Guardian servers running in FIPS 140-2 mode, add certificates used for secure communication to the FIPS keystore.
To add certificates:
Log in to the distributed search source computer.
Browse to the following certificate directory:
cd /etc/opt/novell/sentinel/config/
Copy the source certificate (sentinel.cer) to a temporary location on the requestor computer.
Import the source certificate into the FIPS keystore of the requestor server.
For more information about importing the certificate, see Importing certificates into the FIPS keystore database.
Log in to the distributed search requestor computer.
Browse to the following certificate directory:
cd /etc/opt/novell/sentinel/config
Copy the requestor certificate (sentinel.cer) to a temporary location on the source computer.
Import the requestor system certificate into the FIPS keystore of the source server.
For more information about importing the certificate, see Importing certificates into the FIPS keystore database.
To import certificates:
Copy the certificate file to any temporary location on the Change Guardian server or remote Collector Manager.
Change the ownership of the certificate to novell user:
chown novell:novell /<path to certificate>
Change the permission of the certificate:
chmod 644 /<path to certificate>
Switch to novell user.
Browse to the Sentinel bin directory.
The default location is /opt/novell/sentinel/bin.
Import the certificate into the FIPS keystore database, and then follow the on-screen instructions:
./convert_to_fips.sh -i <certificate file path>Enter yes or y when prompted to restart the Change Guardian server or remote Collector Manager.