1.3 System Requirements and Prerequisites for Workstation

You must obtain a server certificate in pfx format to exchange data between the Identity Console client and the REST server. This server certificate must always be named keys.pfx. For more information, see Creating Server Certificate Objects.

From Identity Console 1.7.2 onwards users can generate Server Certificate during the installation process.

You must obtain a CA certificate for all trees in.pem format to validate the CA signature of the server certificates obtained in the previous step. This root CA certificate also ensures establishing a secured ldap communication between the client and the Identity Console server.

By default, the eDirectory CA certificate for Linux is present at /var/opt/novell/eDirectory/data/SSCert.pem.

By default, the eDirectory CA certificate SSCert.pem for Windows is present at <eDirectory installed Location>\NetIQ\eDirectory\DIBFiles\CertServ\SSCert.pem.

From Identity Console 1.7.2 onwards users can import CA Certificate (SSCert.pem) by providing IP address and port information during installation process.