5.1 Configuring the Publisher Channel Using the KMO File

The Publisher channel sends information from the Web service to the Identity Vault. To establish a secure connection for the Publisher channel, you need a keystore or a KMO containing a certificate issued by the certificate authority that signed the server’s certificate.

Oracle Wallet Manager is an application used to manage and edit security credentials in Oracle wallets. A wallet is a password-protected container that stores authentication and signing credentials, including private keys, certificates, and trusted certificates, all of which are used by SSL for strong authentication. For more information, see Managing Wallets and Certificates.

  1. Create a server certificate in iManager.:

    1. In the Roles and Tasks view, click Novell Certificate Server > Create Server Certificate.

    2. Browse to and select the server object where the Oracle EBS driver is installed.

    3. Specify a certificate nickname.

    4. Select Standard as the creation method, then click Next.

    5. Click Finish, then click Close.

  2. Export a self-signed certificate from the certificate authority in eDirectory:

    1. In the Roles and Tasks view, click Directory Administration > Modify Object.

    2. Select your tree’s certificate authority object, then click OK.

      It is usually found in the Security container and is named something like TREENAME CA.Security.

    3. Click Certificate > Self Signed Certificate., then click Export.

    4. When asked if you want to export the private key with the certificate, click No, then click Next.

    5. Based on the client to be accessing the Web service, select either File in binary DER format or File in Base64 format for the certificate, then click Next.

      If the client uses a Java-based keystore or trust store, then you can choose either format.

    6. Click Save the exported certificate to a file.

    7. Click Save, then browse to a known location on your computer.

    8. Click Save, then click Close.

    9. Save the certificate in the Wallet Manager.

  3. Start the Oracle Wallet Manager and create the certificate in the Oracle EBS system:

    • UNIX: At the command line, enter owm.

    • Windows: Select Start > Programs > Oracle-HOME_NAME > Network Administration > Wallet Manager.

  4. Import the certificate to the list of trusted certificates in the Oracle Wallet Manager:

    1. Click Operations > Import Trusted Certificate, the Import Trusted Certificate dialog appears. Select the certificate created in Step 2 and click OK.

      A message informs you that the trusted certificate was successfully imported into the wallet. The trusted certificate appears at the bottom of the Trusted Certificates tree in the Oracle Wallet Manager main panel.

    2. Save the wallet.

    3. Copy the Wallet Manager folder to a new location (for example, /opt/wallet).

    4. Execute the following SQL statements in the Oracle EBS system to configure the wallet: 

      insert into idmusrmgt.idm_config values('WALLET_PATH','file:/etc/ORACLE/WALLETS/pub')
      insert into idmusrmgt.idm_config values('WALLET_PASSWORD','test123');

    5. Add the required permissions for the folder in Step 4.c, then click OK.

  5. Configure the Publisher channel to use the server certificate created in Step 1:

    1. In iManager, in the Roles and Tasks view, click Identity Manager > Identity Manager Overview.

    2. Locate the driver set containing the Oracle EBS driver, then click the driver’s icon to display the Identity Manager Driver Overview page.

    3. In the Identity Manager Driver Overview page, click the driver’s icon again, then scroll to Publisher Settings.

    4. In the KMO name setting, specify the certificate nickname used in Step 1.

  6. Click Apply, then click OK.